content-security-policy

Content Security Policy (CSP) implemented unsafely. This includes 'unsafe-inline' or data: inside script-src, overly broad sources such as https: inside object-src or script-src, or not restricting the sources for object-src or script-src.

contribute

Contribute.json isn't required on websites that don't belong to Mozilla

cookies

Cookies set without using the Secure flag or set over HTTP

cross-origin-resource-sharing

Content is not visible via cross-origin resource sharing (CORS) files or headers

public-key-pinning

HTTP Public Key Pinning (HPKP) header not implemented

redirection

Initial redirection is to HTTPS on same host, final destination is HTTPS

referrer-policy

strict-transport-security

HTTP Strict Transport Security (HSTS) header set to less than six months (15768000)

subresource-integrity

Subresource Integrity (SRI) not implemented, and external scripts are loaded over HTTP or use protocol-relative URLs via src="//..."

x-content-type-options

X-Content-Type-Options header set to "nosniff"

x-frame-options

X-Frame-Options (XFO) implemented via the CSP frame-ancestors directive

x-xss-protection

X-XSS-Protection header set to "1; mode=block"

block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;

Diagnostics

Metrics

http

_fbp

_ga_78DG5YPE7N

_ga_D9ZE5LB4KQ

_shopify_sa_p

_pin_unauth

_gcl_au

_shopify_sa_t

_orig_referrer

__cf_bm

_shopify_s

_ga_HXMZT7KSHG

_shopify_y

_landing_page

keep_alive

_gid

_gat

_cmp_a

localization

secure_customer_sig

Coque en Bois

Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.

Cloudflare Bot Management

Sendinblue is an email marketing solution for small and medium-sized businesses that want to send and automate email marketing campaigns.

Sendinblue

OVHcloud is a global, cloud provider delivering hosted private cloud, public cloud, and dedicated server solutions.

OVHcloud

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

Cloudflare

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

https://www.coque-en-bois.fr